For compliance offices · Costa Rica
The complete documentary matrix for Costa Rica's regulated entities, with the templates to operate it from day one. Built article by article on Ley 7786, Reglamento 36948 and Acuerdos CONASSIF 12-21 and 11-21 and Acuerdo SUGEF 13-19.
One payment. Immediate download. No subscription.
Document matrix
v1.0Traffic light by diligence type, with the article behind it
The problem
We find them in almost every compliance office, whatever the size of the entity. None of them surfaces on the day it happens.
A digital company registration certificate from the Registro Nacional is valid for fifteen calendar days. A notarised share capital certificate, one month under Acuerdo 12-21. Nobody looks at those dates until the supervisor's visit.
Acuerdo CONASSIF 11-21 set a closed catalogue of documents that evidence the source of funds, and expressly excluded bank statements, sworn declarations — even notarised — and transfer receipts. They keep going into files because they «show something».
They ask a low-risk salaried client for documents simplified diligence does not require, and skip the capital certificate for a company because «they already brought the registration». The file comes back, the client waits, the officer reworks it.
The cost is not only regulatory. It is the officer's time, friction with the client, and commercial growth stuck in the compliance queue.
The matrix
Four cross-referenced tables that answer, for any client, what to ask for, what to accept, when it expires and which article requires it.
7
types of due diligence
Simplified, standard for individuals and for legal entities, enhanced, foreign legal entity, trusts and structures, and third parties. Assigned by a decision tree of six questions in order.
37
documentary rules
Every document with its marking per diligence type — required, conditional, optional or not applicable — and the article that supports it.
23
source-of-funds evidence items
The closed catalogue of Acuerdo CONASSIF 11-21, organised by category, with each document's maximum age and the list of what is not accepted.
19
document classes
Each class with a single expiry rule, its alert window and whether an attachment is required. This is what stops anything expiring silently.
Built on Ley 7786, Decreto Ejecutivo 36948, Acuerdos CONASSIF 12-21 and 11-21, Acuerdo SUGEF 13-19, the INTE/ISO 37301:2021 standard and the OECD Due Diligence Guidance.
What is included
A matrix is worth little if the team cannot operate it. These are the templates that go with it, grouped the way they are used.
3 files
7 files
2 files
5 files
2 files
1 files
How it is written
A document nobody understands is not a control: it is paper. The whole package follows the same drafting principles.
The rule in one sentence, then what to do, then the legal basis.
Every acronym and technical term explained inline: PEP, CICAC, RTBF, beneficial owner, apostille.
Editable fields in pale yellow and proposed parameters in blue, so what has to be decided is visible at a glance.
«Careful» boxes where the mistake is common, and «Good practice» boxes where it is worth going further.
Price
No subscription, no per-user licences, no renewal.
USD 97
One-off payment, taxes according to your jurisdiction
If the package is not what you expected, write to us within the first fourteen days.
Questions
Seven sources, reviewed article by article. FIVE are legally binding in Costa Rica: Ley 7786 and its regulation, Decreto Ejecutivo 36948, which define who is a regulated entity and what their duties are; Acuerdo CONASSIF 12-21, which governs the entities of article 14; Acuerdo CONASSIF 11-21, which sets the closed catalogue of source-of-funds evidence and the use of the CICAC; and Acuerdo SUGEF 13-19, which governs those registered under articles 15 and 15 bis. The other TWO are good practice and not Costa Rican regulatory requirements: the INTE/ISO 37301:2021 compliance management systems standard, which is where the controls over outsourced processes, the monitoring and the internal audit come from; and the OECD Due Diligence Guidance, which is where the six-stage third-party model comes from. Every rule in the package names the article that supports it, so it can be verified at source.
If you are a regulated entity under article 14 of Ley 7786 — supervised by SUGEF, SUGEVAL, SUGESE or SUPEN — the Acuerdo CONASSIF 12-21 regime applies. If you are registered under articles 15 or 15 bis, Acuerdo SUGEF 13-19 applies. The matrix covers both regimes and its parameters sheet compares them side by side.
No. It is a complete, traceable base to build or review one. The parameters that Acuerdo CONASSIF 12-21 leaves to the entity's judgement — frequencies, alerts, exemptions — have to be decided and motivated in minutes, and one of the templates exists exactly for that.
Because Acuerdo CONASSIF 11-21, in its Section II, expressly excludes it. A bank statement shows movements, not the source that generates them. The package includes the full catalogue of what is accepted, with each item's maximum age, and a plain-language page to explain it to the client.
Under Acuerdo CONASSIF 12-21 each entity's own policy decides, based on risk, with a ceiling of sixty months and a higher frequency for high risk. Under Acuerdo SUGEF 13-19 the deadlines are fixed. Many policies still copy the fixed deadlines with no minutes to justify them, and that is a finding however reasonable the deadlines are.
Yes, under article 34 of Acuerdo CONASSIF 12-21, stamped by the Central Bank and issued no more than thirty days earlier. It is free, and most entities still do not accept it.
The tools are: Word, Excel and PowerPoint, with no macros. The guides and the presentation are PDF on purpose, because they are reference material and are not built to be altered.
Yes, and that is the most common use. The matrix lets you check your current policy rule by rule against the regulation, and the pre-supervision self-assessment — thirty questions with the evidence expected for each — shows where the support is missing before the supervisor finds it.
The package was prepared on Costa Rican regulation in force as of September 2026, and includes a version and regulatory change log to record every review. Regulation changes: the cut-off date is written into every file.
Download the matrix, approve your parameters in minutes and hand out the templates. What lives today in the compliance officer's head becomes written down, with the article behind every rule.
Get the toolkit · USD 97A perfect matrix is still a document: somebody has to read it, remember it and apply it, client by client. Snap Compliance's ERP for Risk Management and Regulatory Compliance turns these same rules into a system that assigns the diligence type, validates the evidence, calculates the risk and warns before anything expires.
See the Snap Compliance ERP